This commit is contained in:
Anthony Stirling 2025-08-05 14:37:22 +01:00
parent 2c6f27a0b0
commit 9deb900de4
4 changed files with 12 additions and 9 deletions

View File

@ -55,8 +55,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
openssl \
openssl-dev \
openjdk21-jre \
# Security updates
libjxl@testing \
# Security updates - remove when Alpine base image updates these
libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# Doc conversion
gcompat \
libc6-compat \
@ -75,7 +76,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
python3 \
ocrmypdf \
py3-pip \
py3-pillow@testing \
py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1
py3-pdf2image@testing \
# URW Base 35 fonts for better PDF rendering
font-urw-base35 && \

View File

@ -69,8 +69,9 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
openssl \
openssl-dev \
openjdk21-jre \
# Security updates
libjxl@testing \
# Security updates - remove when Alpine base image updates these
libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# Doc conversion
gcompat \
libc6-compat \
@ -90,7 +91,7 @@ RUN echo "@main https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /etc/a
python3 \
ocrmypdf \
py3-pip \
py3-pillow@testing \
py3-pillow@community \ # CVE-2025-48379 - ensure Pillow 11.3.0+ instead of 11.2.1
py3-pdf2image@testing && \
python3 -m venv /opt/venv && \
/opt/venv/bin/pip install --no-cache-dir --upgrade pip setuptools && \

View File

@ -37,8 +37,9 @@ RUN echo "@testing https://dl-cdn.alpinelinux.org/alpine/edge/main" | tee -a /et
shadow \
su-exec \
openjdk21-jre \
# Security updates
libjxl@testing && \
# Security updates - remove when Alpine base image updates these
libjxl@community \ # CVE-2024-11403, CVE-2024-11498 - libjxl vulnerabilities
rav1e@community && \ # CVE-2025-4574, GHSA-2rxc-gjrp-vjhx, RUSTSEC-2024-0404, GHSA-pg9f-39pc-qf8g - Rust crossbeam-channel/anstream via rav1e
# User permissions
mkdir -p /configs /logs /customFiles /usr/share/fonts/opentype/noto /tmp/stirling-pdf /pipeline/watchedFolders /pipeline/finishedFolders && \
chmod +x /scripts/*.sh && \

View File

@ -57,7 +57,7 @@ repositories {
allprojects {
group = 'stirling.software'
version = '1.1.1'
version = '1.1.2'
configurations.configureEach {
exclude group: 'commons-logging', module: 'commons-logging'